EUVD-2025-111792

Malicious code in less-loader-hercules-phoenix-miranda npm...

Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-less-loader-uninstall-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0acd2d52c31594304a5cb4d7f1f978a7ccb708ecc08f763b3b072edd8a37b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111781

Malicious code in less-loader-stream-apollo-impulse npm...

Malicious code in less-loader-phoebe-scripts-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0453a8015b61b94e10fc0eae56409daed68846374d696e999e769cf556719508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-stream-publish-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87848632542c547d5ecef043ccf837f25736a226b95c2f670c701032a0ebabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121791

Malicious code in spectron-webdriver-less-loader-jest-gridsome npm...

Malicious code in mocha-less-loader-axios-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bba08a828bd8ae434fdbe2f07303a911d202385632eb1fa95adf5361f03147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121963

Malicious code in sirius-magellan-middleware-less-loader npm...

EUVD-2025-111782

Malicious code in less-loader-sqlite-cressida-leda npm...

EUVD-2025-123011

Malicious code in quantum-parcel-tailwindcss-less-loader npm...

EUVD-2025-115113

Malicious code in commitlint-triton-less-loader-umbra npm...

EUVD-2025-111776

Malicious code in less-loader-virgo-phenomic-typeorm npm...

EUVD-2025-112124

Malicious code in jsonp-blitz-cordelia-less-loader npm...

EUVD-2025-115513

Malicious code in chai-less-loader-less-repository npm...

EUVD-2025-111778

Malicious code in less-loader-toml-private-soap npm...

EUVD-2025-114467

Malicious code in dione-aurora-less-loader-pegasus npm...

EUVD-2025-123937

Malicious code in passport-less-loader-carpo-acamar npm...

EUVD-2025-124181

Malicious code in oberon-aether-weywot-less-loader npm...

MAL-2025-146432 Malicious code in postgres-geckodriver-less-loader-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e7ffe9e4024063c41783a941e17513fc2266685fa86e77704cddf053a63167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...